NIS2 Directive:
Urgent Action for Businesses
The new EU directive for cybersecurity obliges thousands of companies to implement stricter security measures.
Are you prepared?
What is NIS2?
The NIS2 directive is the EU's response to the growing threat landscape in cyberspace. It replaces the original NIS directive and massively expands its scope.
The goal is to ensure a consistently high level of security across the entire Union. Affected companies must take technical, operational, and organizational measures to ensure the security of their network and information systems.
- Expanded scope (18 sectors)
- Personal liability of management
- Strict incident reporting obligations
- Supply chain security
The 3 Pillars of Duties
Implementation of appropriate technical and organizational measures (TOMs) according to "state of the art".
Initial notification of significant security incidents within 24 hours to the national authority (BSI).
Concepts for maintaining business operations during cyberattacks (Backup, Disaster Recovery).
NIS2 compliant with Thalvos Cloud
We not only provide consulting but also deliver the technological solutions explicitly required by NIS2.
MDR & Incident Response
NIS2 requires attack detection. With Bitdefender MDR, you get a 24/7 Security Operations Center (SOC) that detects and stops attacks.
More about MDR →Backup & Recovery
Data loss can be existential. We implement robust backup strategies for rapid recovery (Disaster Recovery).
Backup Solutions →Consulting & Training
We help with gap analysis and train your employees. Because humans remain the most critical factor in the security chain.
Schedule a meeting →Common Questions about NIS2
When does NIS2 apply?
NIS2 is already in force. Member states had to transpose the directive into national law by October 17, 2024. In Germany, this is implemented through the NIS2UmsuCG.
Are there exceptions for SMEs?
Basically, NIS2 applies from 50 employees and €10 million annual turnover. However, there are exceptions for certain critical sectors (e.g., DNS service providers, trust services), which are affected regardless of size.
What happens if I ignore NIS2?
Significant fines threaten (up to €10 million or 2% of global annual turnover for essential entities). In addition, management is personally liable for the implementation of measures.
Unsure if you are affected?
Use our free online check now and get clarity in less than 1 minute.
Start Check Now